HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

KbdInteractiveDevices
Use this directive to specify the list of methods to use in keyboard-interactive authentication. Multiple
method names must be comma-separated.
The default is to use the server specified list.
For example:
KbdInteractiveDevices pam
KexAlgorithms
Use this directive to specify the available KEX (Key Exchange) algorithms. Multiple algorithms must
be comma-separated.
The default is ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,
diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,
diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
For example:
KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
LocalCommand
Use this directive to specify a command to execute on the local machine after successful connection
to the server. The following escape character substitutions will be performed:
%d local users home directory
%h remote host name
%l local host name
%n host name as provided on the command line
%p remote port
%r remote user name
%u local user name
For example:
LocalCommand pwd
NOTE: This directive is ignored unless PermitLocalCommand is enabled.
LocalForward
Use this directive to specify that a TCP/IP port on the local host must be forwarded over the secure
channel to the specified host and port of the remote host. The first value must be[bind_address:
] port. The second value must be host:hostport. The IPv6 addresses can be specified by
enclosing addresses in square brackets or by using the following syntax: [bind_address/] port
or host / hostport.
You can specify multiple forwardings on the command line. Only the superuser can forward
privileged ports. By default, the local port is bound in accordance with the GatewayPorts setting.
However, you can use an explicit bind_address to bind the connection to a specific address.
Thebind_address of localhost indicates that the listening port is bound for local use only.
An empty address or star (*) indicates that the port is available for all interfaces.
This directive does not have a default value.
For example:
LocalForward localhost:5001 remotehost:23
LogLevel
Use this directive to specify the verbosity level used when logging messages from ssh.
Table 24 lists the valid values for the LogLevel directive.
92 Configuration Files and Directives